https://community.splunk.com/t5/Splunk-Enterprise/Searching-specific-related-fields-from-multiple-CSV-files/m-p/582956#M11358 <P>I have 3 CSV files. The 1st holds one item/column of data I need. The 2nd holds several items related to the 1st and I only need that column related to file #1. The 3rd goes deeper and needs to be related to each item in file #2.&nbsp;</P><P>IE:&nbsp;</P><P>Data1&nbsp; &nbsp; &nbsp;</P><P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Data2</P><P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Data3</P><P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Data3</P><P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Data2</P><P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Data3</P><P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Data3</P><P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Data3</P><P>&nbsp;</P><P>Anyone have any ideas? If I can't find a way to do this with a search I'll be stuck with a lot of copy/paste manual work.&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;</P> Fri, 28 Jan 2022 17:47:51 GMT jamieflowers198 2022-01-28T17:47:51Z https://community.splunk.com/t5/Splunk-Enterprise/Searching-specific-related-fields-from-multiple-CSV-files/m-p/582956#M11358 <P>I have 3 CSV files. The 1st holds one item/column of data I need. The 2nd holds several items related to the 1st and I only need that column related to file #1. The 3rd goes deeper and needs to be related to each item in file #2.&nbsp;</P><P>IE:&nbsp;</P><P>Data1&nbsp; &nbsp; &nbsp;</P><P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Data2</P><P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Data3</P><P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Data3</P><P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Data2</P><P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Data3</P><P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Data3</P><P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Data3</P><P>&nbsp;</P><P>Anyone have any ideas? If I can't find a way to do this with a search I'll be stuck with a lot of copy/paste manual work.&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp;</P> Fri, 28 Jan 2022 17:47:51 GMT https://community.splunk.com/t5/Splunk-Enterprise/Searching-specific-related-fields-from-multiple-CSV-files/m-p/582956#M11358 jamieflowers198 2022-01-28T17:47:51Z https://community.splunk.com/t5/Splunk-Enterprise/Searching-specific-related-fields-from-multiple-CSV-files/m-p/582967#M11360 <P>That's not much to work with, but perhaps this will get you started.</P><LI-CODE lang="markup">| inputlookup CSV1.csv | lookup CSV2.csv someCSV2field as CSV1field OUTPUT moreCSV2fields | lookup CSV3.csv someCSV3field as CSV2field OUTPUT more CSV3fields | table CSV1field CSV2field CSV3fields</LI-CODE> Fri, 28 Jan 2022 18:33:14 GMT https://community.splunk.com/t5/Splunk-Enterprise/Searching-specific-related-fields-from-multiple-CSV-files/m-p/582967#M11360 richgalloway 2022-01-28T18:33:14Z